WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
clover-online-orders
Published
2026-04-15
Title
Smart Online Order for Clover < 1.6.5 - Cross-Site Request Forgery
Slug
clover-online-orders
Published
2026-05-27
Title
Smart Online Order for Clover < 1.6.1 - Unauthenticated Stored Cross-Site Scripting
Slug
clover-online-orders
Published
2026-05-28
Title
Smart Online Order for Clover < 1.6.1 - Unauthenticated Sensitive Information Exposure
Slug
clover-online-orders
Published
2026-05-28
Title
Smart Online Order for Clover < 1.6.1 - Missing Authorization
Slug
clover-online-orders
Published
2026-08-10
Title
Smart Online Order for Clover < 1.6.2 - Unauthenticated Stored Cross-Site Scripting
Slug
clp-custom-login-page
Published
2025-04-01
Title
CLP – Custom Login Page by NiteoThemes <= 1.5.5 - Cross-Site Request Forgery
Slug
clp-varnish-cache
Published
2026-01-26
Title
CLP Varnish Cache < 1.0.3 - Missing Authorization
Slug
club-management-software
Published
2021-07-23
Title
WordPress Membership SwiftCloud.io <= 1.0 - Authenticated SQL Injection
Slug
clubmember
Published
2025-11-03
Title
Clubmember <= 0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
cluevo-lms
Published
2022-01-10
Title
Cluevo < 1.8.1 - Admin+ Stored Cross Site Scripting
Slug
cluevo-lms
Published
2023-08-17
Title
CLUEVO LMS, E-Learning Platform < 1.11.0 - Settings Update via CSRF
Slug
cluevo-lms
Published
2024-12-05
Title
CLUEVO LMS, E-Learning Platform <= 1.13.2 - Cross-Site Request Forgery to Module Deletion
Slug
cluevo-lms
Published
2025-01-08
Title
CLUEVO LMS, E-Learning Platform < 1.13.3 - Reflected Cross-Site Scripting
Slug
clyp
Published
2024-10-31
Title
Clyp <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cm-ad-changer
Published
2016-04-21
Title
CM Ad Changer < 1.7.6 - Cross-Site Scripting (XSS)
Slug
cm-ad-changer
Published
2016-06-09
Title
CM Ad Changer <= 1.7.7 - Stored Cross-Site Scripting (XSS)
Slug
cm-ad-changer
Published
2025-04-22
Title
CM Ad Changer < 2.0.6 - Cross-Site Request Forgery
Slug
cm-ad-changer
Published
2026-05-26
Title
CM Ad Changer < 2.0.8 - Cross-Site Request Forgery to Campaign Deletion via Campaign Management
Slug
cm-answers
Published
2023-02-23
Title
CM Answers < 3.2.0 - Admin+ Stored XSS
Slug
cm-answers
Published
2024-12-10
Title
CM Answers < 3.2.7 - Missing Authorization
Slug
cm-answers
Published
2025-04-22
Title
CM Answers < 3.3.4 - Cross-Site Request Forgery
Slug
cm-business-directory
Published
2024-11-25
Title
Multiple Plugins from CreativeMindsSolutions - Reflected XSS
Slug
cm-business-directory
Published
2025-09-25
Title
CM Business Directory < 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cm-business-directory
Published
2026-01-16
Title
CM Business Directory – Optimise and showcase local business < 1.5.4 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
cm-business-directory
Published
2026-07-02
Title
CM Business Directory < 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Business Address Meta Fields